JDK-8371578 : Release Note: Signed JAR Support for ML-DSA
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 26
  • Priority: P4
  • Status: Closed
  • Resolution: Delivered
  • Submitted: 2025-11-10
  • Updated: 2025-11-10
  • Resolved: 2025-11-10
Description
The JDK now supports creating and verifying JAR files signed with the post-quantum ML-DSA algorithm, using PKCS #7 as defined in [RFC 9882](https://datatracker.ietf.org/doc/html/rfc9882). This new feature is available through both the `JarSigner` API and the `jarsigner` tool.